CC 101 - Basic Digital Forensic Imaging (Aug 16 2018)

This course covers the fundamentals of computer operations, hardware function, configuration, and best practices for the protection, preservation, and imaging of digital evidence. Presentations and hands-on exercises cover topics such as partitioning, data storage, hardware and software write blockers, the boot-up and shutdown processes, live imaging, encryption detection, and duplicate imaging. This course incorporates computer forensic applications that experienced practitioners are currently using in the field.

Course structure:

Fundamental building blocks for computer forensics;

Best practices for forensic imaging, imaging at the scene, and validating forensic tools;

Resources

News and Media

This website is supported by Contract No GS-00F-008DA awarded by the Office of Justice Programs, U.S. Department of Justice. Points of view or opinions on this website are those of the author and do not necessarily represent the official position or policies of the U.S. Department of Justice.